Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/49e76bad-f289-35f2-be4e-1d132305579f.roa
File:                     49e76bad-f289-35f2-be4e-1d132305579f.roa (raw, json)
Hash identifier:          hz3Eh67qlh7tpOY7sGngLCFWac/GbEQgF7axncJ8Thc=
Subject key identifier:   DE:F4:FF:E4:0C:E0:A1:D5:ED:46:AD:EC:ED:29:93:CB:D2:AB:C5:03
Certificate issuer:       /CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd
Certificate serial:       010D0C9F43285845D668FF52F1BAAEA824985060
Authority key identifier: B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/49e76bad-f289-35f2-be4e-1d132305579f.roa
Signing time:             Sat 11 May 2024 13:00:34 +0000
ROA not before:           Sat 11 May 2024 13:00:34 +0000
ROA not after:            Fri 09 Aug 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        199.43.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d6:68:ff:52:f1:ba:ae:a8:24:98:50:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd
        Validity
            Not Before: May 11 13:00:34 2024 GMT
            Not After : Aug  9 13:00:34 2024 GMT
        Subject: CN=b402056b-9382-4c25-b9f8-0168d8896676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bd:09:e8:00:59:00:5a:25:d7:b9:83:c6:12:
                    c3:43:cc:dc:95:75:43:86:95:d5:fb:18:cc:15:e1:
                    a5:00:24:57:56:ab:23:62:ed:a0:7b:2a:2d:2a:77:
                    42:a8:10:13:22:41:f0:29:72:e5:9a:96:b7:ed:e5:
                    6c:5c:30:35:4b:c5:fb:a6:55:80:5e:0d:97:a2:47:
                    32:42:fe:ac:e9:70:ca:41:60:a8:4e:4e:53:8f:37:
                    09:cb:92:c6:7d:41:ae:8a:3a:35:e2:b1:76:d9:86:
                    0e:cf:05:d8:64:55:35:41:6c:9b:3e:6d:69:40:1c:
                    33:c4:12:04:05:dc:d2:33:f7:98:08:5a:f7:f3:1c:
                    c4:8d:f4:a6:b2:cf:4d:82:6a:1d:c6:eb:4d:69:6d:
                    64:4c:b3:9d:7e:27:29:7c:56:16:02:d5:de:aa:d7:
                    7c:44:fb:cc:b2:61:40:6a:d4:50:95:57:31:2b:2b:
                    49:b7:3e:97:90:2c:b9:29:65:4d:e7:29:1e:20:2c:
                    24:89:4d:f6:fe:97:40:2a:76:55:a2:53:80:d6:79:
                    0d:b2:06:17:cc:20:b0:ea:e2:2d:c4:b6:0d:a8:f7:
                    f5:ae:f0:21:1b:36:0f:5b:b2:f9:7c:7e:a2:fb:bf:
                    42:55:b1:50:d4:70:e0:5c:09:ab:8a:cc:ca:30:1e:
                    5f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F4:FF:E4:0C:E0:A1:D5:ED:46:AD:EC:ED:29:93:CB:D2:AB:C5:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/49e76bad-f289-35f2-be4e-1d132305579f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.crl

            X509v3 Authority Key Identifier:
                keyid:B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.43.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:45:9f:c7:17:6b:46:16:0e:48:4c:ff:c6:35:dc:4c:20:f4:
         01:7a:f8:74:4e:56:01:fb:be:c0:46:7a:d6:2b:6a:59:c9:92:
         29:4c:89:cd:2e:15:af:65:94:35:7f:e1:e9:cb:6c:96:14:36:
         4d:28:d2:47:76:7c:bf:af:25:26:39:39:ce:28:f7:4e:12:96:
         03:d3:98:c0:fb:e5:9f:fc:2c:48:57:2f:ad:98:6a:83:2a:39:
         43:a2:6a:e1:00:1e:57:9a:c4:cf:c2:2f:71:4d:17:8b:bb:d7:
         c9:42:57:7c:67:cc:bb:bc:85:fb:13:35:35:5b:23:dc:80:6f:
         7d:d4:1c:7b:82:de:55:05:85:5e:80:9a:01:b5:03:c8:44:3e:
         9b:9d:02:77:cb:38:2e:0e:e3:de:73:d1:46:db:a7:4d:c8:e8:
         ee:21:af:81:58:c9:14:8a:d3:f4:1c:ae:d7:7a:a8:ae:3f:ed:
         74:fd:be:e4:ba:c2:71:70:60:0a:f2:2e:fb:96:46:1a:d4:6b:
         68:9e:bc:cb:4e:c7:79:36:d5:a6:ea:82:d0:28:63:4a:b2:a4:
         87:41:67:23:99:0b:47:37:c9:38:78:77:27:25:80:b5:93:6d:
         57:15:26:22:fd:43:22:ac:40:3e:09:fa:c0:33:3f:db:16:b3:
         36:41:ec:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:42 2024 by rpki-client on console-fra.rpki-client.org